Screen OS

 View Only
last person joined: 9 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Changing SSG5 'netscreen' password

    Posted 10-06-2010 13:05

    The password for the 'netscreen' user was changed and not documented. There is another user on the box with the following configuration:

     

     

    set admin user "user" password "secret data" privilege "all"

     

     

    Would it be possible to change the netscreen password with this other account?

     

    Thanks in advance!



  • 2.  RE: Changing SSG5 'netscreen' password
    Best Answer

    Posted 10-07-2010 07:46

    I don't believe you can change root password from non-root account.  Best option may be to backup config and restore, deleting the root password config line.



  • 3.  RE: Changing SSG5 'netscreen' password

    Posted 10-07-2010 08:34

    aweck - is right - you can't change the root level password from a non-root account. His suggestion is worth trying - save the config off, edit the netscreen password in clear text in the config and try and reload it.

     

    Worst case scenario would be to save the config, do a reset on the box and bring it up with the saved config.



  • 4.  RE: Changing SSG5 'netscreen' password

    Posted 10-07-2010 18:03

    I have used the reload of the configuration method to restore access on devices.

     

    You can replace these two lines in the configuration where you don't know the password with the ones below from a default configuration that makes it netscreen/netscreen.

     

    set admin name "netscreen"
    set admin password "nKVUM2rwMUzPcrkG5sWIHdCtqkAibn"

     

    You can also copy these lines from a configuration where you know the password to the unknown password configuration then load it.

     

    This will also work if you need to reset to factory default then load the configuration again because you have no access.



  • 5.  RE: Changing SSG5 'netscreen' password

    Posted 10-08-2010 06:11

    Thanks for the advice everyone. I'll be performing the resets over the weekend.